The Gold Standard in Digital Investigation

Our Heritage: Best in Class. Proven in Courts.Guidance created the category for digital investigation software with EnCase Forensic in 1998. EnCase has maintained its reputation as the gold standard in criminal investigations and was named the Best Computer Forensic Solution for seven consecutive years by SC Magazine. No other solution offers the same level of functionality, flexibility, and has the track record of court-acceptance as EnCase Forensic. With EnCase offering mobile forensics, investigators have the flexibility and convenience they need to complete their investigations quickly and efficiently.

One Product. One Mission: Get You to Case Closed.Unlike other forensic solutions that only provide surface level visibility, EnCase Forensic offers the flexibility for any investigator to:

Acquire data from the widest variety of devices, including over 25 types of mobile devices such as smartphones, tablets, and GPS

Complete a comprehensive, forensically sound investigation

Produce extensive reports on findings while maintaining the evidence integrity

Recipient of SC Magazine Trust Award for Best Computer Forensic Solution for seven years.

EnCase Forensic Across Your Investigation Lifecycle

From the moment a case is opened to the moment you hand it over to the district attorney, you'll get your work done right, through:

Triage

Collect

Decrypt

Process

Investigate

Report

Triage

In the Field and in the Lab

EnCase Forensic enables you to quickly search, identify, and prioritize potential evidence, in computers and mobile devices, to determine whether further investigation is warranted. This will result in a decreased backlog so that investigators can focus on getting to case closed.

Collect

Secure Your Evidence. Protect Your Case.

EnCase Forensic helps you acquire more evidence than any product on the market. You can collect from a wide variety of operating and file systems, including over 25 types of mobile devices with EnCase Forensic. Parse the most popular mobile apps across iOS, Android, and Blackberry devices so that no evidence is hidden. This is the flexibility needed to ensure you can complete your cases no matter where the potential evidence resides.

Decrypt

Unlock Encrypted Evidence

EnCase Forensic is unmatched in its decryption capabilities, offering the broadest support of any forensic solution. Encryption support includes products such as Dell Data Protection, Symantec, McAfee, and many more. You can further expand the decryption power of EnCase Forensic with Tableau Password Recovery — a purpose-built, cost-effective hardware solution to identify and unlock password-protected files.

Process

Automate the Routine, Focus on the Investigation

The EnCase Forensic evidence processor provides industry-leading processing capabilities that can automate the preparation of evidence, making it easier to complete the investigation. Powered by an indexing engine built for scale and performance, you can automate complex queries across your varied evidence sources in one step saving time and increasing your efficiency.

Investigate

Bring Your Expertise to the Forefront

The most important part of any investigation is your ability to analyze your evidence. EnCase Forensic is built with the investigator in mind, providing a wide range of capabilities that enables you to perform deep forensic analysis as well as fast triage analysis from the same solution. Built to help you do what you do best: find evidence and close cases.

Report

Tailor Your Reports for Your Audience

EnCase Forensic provides a flexible reporting framework that empowers you to tailor case reports to meet your specific needs. With comprehensive and triage reporting options built in, you can create reports for a wide range of audiences and easily share them across your organization.

“It is a very powerful tool that has the ability to solve a case in just a few clicks or it enables flexibility and increased interrogation of the data through the EnScript functionality. I use it all the time and they both save time and present the evidence brilliantly.”

Barrie Sinfield, Digital Forensic Unit, Cambridgeshire Constabluary

“I am already speaking all over about how Guidance has turned the page to really pay attention to LE and Child Exploitation to save victims globally.”

EnCase Mobile Investigator

EnCase Mobile Investigator was built with the investigator in mind. As investigations including mobile devices grow exponentially, investigators need a solution to keep up with the latest mobile devices, applications and operating systems so that criminals can be prosecuted. When coupled with EnCase Forensic, EnCase Mobile Investigator empowers forensic investigators to seamlessly acquire, review, analyze, and report on mobile evidence from the widest variety of devices so that no evidence is hidden. Unlike other traditional forensic solutions, EnCase Forensic and EnCase Mobile Investigator provide investigators with the flexibility, visibility, and ease-of-use to complete any forensic investigation from end to end.

PURCHASING OPTIONS

Site Licenses

The EnCase Forensic Site License allows you to grow as your forensic needs evolve. With an upfront commitment of no less than 3 licenses, a site license provides access to additional copies of EnCase Forensic at a pre-negotiated discounted rate, allowing you to better predict the cost of increasing your staff and your budgets year-over-year.

Perpetual License

Ensure your federal, state, or local law enforcement agency has the software needed for any investigation by paying a one-time licensing fee and a small yearly maintenance fee for access to software updates, tech support, and the forensic community portal.

Term Based Licensing

Extend the capabilities of your consulting services with a term-based license paid yearly. The term option is great for any consulting organization that wants to minimize the upfront costs of getting up and running on EnCase Forensic.

Academic Program

Designed to assist professors and student, the EnCase Academic Program allows universities and colleges to bring EnCase into the classroom. With the Academic Program students get hands-on experience with the leading forensic solution, increasing their marketability when they graduate.

EnCase Forensic 8 delivers the capabilities you need to complete your investigations efficiently. This document discusses the new capabilities in version 8, including mobile acquisition, as well as some of the usability enhancements designed to make ...

We brought together the best practices and most common investigator requests into the newest release of EnCase Forensic 8. Built with feedback from our forensic community, you will learn those better ways during this webinar as we explore new capabil...

The largest obstacle facing examiners is the ability to circumvent locked devices. One of the common methods that is used to get around the locks on a device for the Android operating system is the use of a bootloader. This short demo walks you throu...